Content Guide

Authenticating an email sender domain means creating and publishing three types of DNS records: DKIM, SPF, and DMARC. This article series will teach you the basics of each record type and how to implement them.

All three record types must be published for each domain you use to send email messages.

Email sender authentication protocols help prove the legitimacy of your email messages and increase the odds that your message will land in a recipient’s inbox. 

Effective sending practices are critical for preventing email spam and fraud and can significantly boost the open rates and visibility of your messages.

To authenticate an email sender domain for KartraMail, follow this checklist to add your email domains to your Kartra account and update your Domain Name System (DNS) records.

  1. Add a custom domain email to your KartraMail configuration
  2. Add the business domain to your Kartra account to create DKIM records
  3. Add the Kartra-generated DKIM records to your business domain DNS
  4. Add or update an SPF record to your business domain DNS (integrated SMTP users only)
  5. Add DMARC records to your business domain DNS
  6. Test your updates!

Email sender authentication checklist

1. Add a custom domain email to your KartraMail configuration

A custom domain email address adds legitimacy to your business communications and can improve your deliverability. Contact your domain provider to create an email address and then add it to your KartraMail configuration.

The custom sender domains you use in Kartra are the ones you will authenticate through the rest of this list.

2. Add the business domain to your Kartra account to create DKIM records

If your domain is purchased inside Kartra through the Ionos integration, or if your domain host supports automatic configuration, Kartra will automatically create and publish your DKIM records for you. No manual DNS entry is required in these cases. 

If automatic DKIM setup is not available for your domain host, Kartra will show the DKIM record you need to add manually in your DNS. Learn more about generating DKIM records for KartraMail

3. Add the Kartra-generated DKIM records to your business domain DNS

Copy the Kartra-generated DKIM records and add them to your custom email DNS settings to complete the authentication loop between Kartra and your domain. Skip this step if your domain was configured automatically. Kartra will indicate when DKIM has been created and verified without manual action.

4. Add or update an SPF record to your business domain DNS (integrated SMTP users only)

Update the SPF record for your domain to designate Kartra as a service authorized to send mail on your behalf.

Important: If you use KartraMail, the SPF record is automatically provided as part of the DKIM records you set up in the previous step. Skip this step if you use KartraMail as your email gateway.

5. Add DMARC records to your business domain DNS

Add a DMARC policy to monitor DKIM and SPF alignment of messages sent with your domain and set up reporting so you stay informed.

Learn more about defining and publishing a DMARC policy

6. Test your updates!

Use the tools provided in each resource linked in this article to test and check each piece of the authentication puzzle.

There are lots of free and paid resources available online that can help you create, check, and monitor the authentication protocols for your email domains.

Important:
  • Email sender authentication must be performed for each domain you use to send your emails.
  • If you add new email addresses as the send-from address in any mail configuration in your account, this checklist must be completed again to authenticate the new domain(s).

If you add a domain that supports automatic configuration (or purchase a domain from IONOS via Kartra), DKIM authentication will be handled automatically as part of the domain setup.